Lucene search
+L

1420 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 3:47 a.m.•12 views

SUSE CVE-2021-20178

A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...

5CVSS9.2AI score0.0034EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2023/02/15 3:47 a.m.•15 views

SUSE CVE-2021-20180

A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...

5CVSS9.2AI score0.00314EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2023/02/09 12:00 a.m.•18 views

Atlassian Bitbucket Public Repo Enumeration

Binary data bitbucketpublicrepoenumeration.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/02/09 12:00 a.m.•61 views

Atlassian Bitbucket RCE (CVE-2022-36804)

Binary data bitbucketcve-2022-36804.nbin...

8.8CVSS9AI score0.99174EPSS
SaveExploits25References2
Positive Technologies
Positive Technologies
•added 2023/02/07 12:00 a.m.•17 views

PT-2023-19973

Name of the Vulnerable Software and Affected Versions Apache Kafka Connect versions prior to 3.4.0 Apache Kafka versions 2.3.0 through 3.3.x Bitbucket Data Center and Server versions 7.21.0 through 8.12.0 Description A possible security vulnerability has been identified in Apache Kafka Connect AP...

8.8CVSS7.6AI score0.9581EPSS
SaveExploits8References23
OpenVAS
OpenVAS
•added 2023/02/03 12:00 a.m.•39 views

Fedora: Security Advisory for git-credential-oauth (FEDORA-2023-267503a090)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS7.2AI score0.06077EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2023/02/02 1:42 a.m.•479 views

Exploit for Argument Injection in Atlassian Bitbucket

Atlassian-Bitbucket-Server-CVE-2022-36804 A critical command...

8.8CVSS9.1AI score0.99174EPSS
SaveExploits25
osv_ghsa
osv_ghsa
•added 2023/01/26 9:30 p.m.•57 views

GHSA-685J-36QX-3VP2 Cross-site request forgery vulnerability in Jenkins Bitbucket OAuth Plugin

A cross-site request forgery CSRF vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account...

5.7CVSS5.8AI score0.00484EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2023/01/26 9:30 p.m.•49 views

Session fixation vulnerability in Jenkins Bitbucket OAuth Plugin

Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login...

9.8CVSS8.9AI score0.01062EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2023/01/26 9:30 p.m.•48 views

Cross-site request forgery vulnerability in Jenkins Bitbucket OAuth Plugin

A cross-site request forgery CSRF vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account...

5.7CVSS6.4AI score0.00484EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2023/01/26 9:30 p.m.•66 views

GHSA-X9Q4-QWFH-9GJQ Session fixation vulnerability in Jenkins Bitbucket OAuth Plugin

Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login...

9.8CVSS9.5AI score0.01062EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2023/01/26 9:18 p.m.•31 views

CVE-2023-24428

A cross-site request forgery CSRF vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account...

5.7CVSS5.6AI score
SaveExploits0References1
NVD
NVD
•added 2023/01/26 9:18 p.m.•42 views

CVE-2023-24428

A cross-site request forgery CSRF vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account...

5.7CVSS5.5AI score0.00484EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/01/26 9:18 p.m.•33 views

CVE-2023-24427

Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login...

9.8CVSS9.5AI score
SaveExploits0References1
NVD
NVD
•added 2023/01/26 9:18 p.m.•38 views

CVE-2023-24427

Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login...

9.8CVSS9.5AI score0.01062EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/26 9:18 p.m.•28 views

Design/Logic Flaw

Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login...

7.5CVSS9.5AI score0.01062EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/01/26 9:18 p.m.•28 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account...

3.5CVSS5.6AI score0.00484EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•20 views

Jenkins Plugin Bitbucket OAuth 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. Jenkins Plugin A security...

5.7CVSS5.9AI score0.00484EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•20 views

Jenkins Plugin Bitbucket OAuth 授权问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

9.8CVSS8.3AI score0.01062EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/01/24 12:00 a.m.•49 views

CVE-2023-24427

Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login...

9.8AI score0.01062EPSS
SaveExploits0References1
Rows per page
Query Builder